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Response to Amendment 
Claim 7 has been cancelled. Applicant's amendments with respect to amended claims 1 
& 8 and previously presented claims 2-6 and 9-39 filed May 17, 2005 have been fully considered 
and therefore the claims are rejected under new grounds as necessitated by the Applicant's 
submission of an information disclosure statement filed May 17, 2005. The Examiner would like 
to point out that this action is made final (See MPEP 706.07a). 

Claim Rejections - 35 USC § 103 

I. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art are 
such that the subject matter as a whole would have been obvious at the time the invention was made to a person 
having ordinary skill in the art to which said subject matter pertains. Patentability shall not be negatived by the 
manner in which the invention was made. 

II. Claims 1-4, 8-22, and 24-38 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Porter et al., United States Patent No. 5,845,067 and Ginter et al., United States Patent No. 
6,237,786. 

As per claim 1 : 

Porter et al. teach a method for on-line mass distribution of data products to end users, the 
method comprising: maintaining a first portion of each of said data products at a first location 
(col. 3, lines 28-34), maintaining a second portion of each of said data products at a second 
location (col. 3, lines 35-56); for each of said end users, confirming the end user's entitlement to 
one of said data products (col. 5, lines 30-35); obtaining a first portion of said one of said data 
products from said first location and a second portion of said one of said data products from said 
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second location; combining said first portion of said one of said data products and said second 
portion of said one of said data products, and providing said combined first portion and second 
portion to said user (col. 1, lines 41-46). 

Not explicitly disclosed by Porter et al. is wherein said step of combining is performed at 
said second location. However, Ginter et al. teach that there can be many different ways to store 
information, as well as to combine information, one of the methods including combining at the 
second location. Therefore, it would have been obvious to a person in the art at the time the 
invention was made to modify the method disclosed in Porter et al. to combine the portions at the 
second location. This modification would have been obvious because a person having ordinary 
skill in the art, at the time the invention was made, would have been motivated to do so since it is 
suggested by Ginter et al. in col. 288, lines 60-63 and col. 290, lines 15-33. 
As per claim 2: 

Porter et al. and Ginter et al. substantially teach the method, as applied to claim 1 above. 
Not explicitly disclosed is the method, wherein said data products include geographic databases. 
However, Porter et al. teaches that a document can be any information stored as files in a file 
system, which can equate to the information contained by a geographic database. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
method disclosed in Porter et al. for the data product to include files of geographical information 
stored in a file system, which is equivalent to a database. This modification would have been 
obvious because a person having ordinary skill in the art, at the time the invention was made, 
would have been motivated to do so since it is suggested by Porter et al. in col. 7, lines 26-32. 
As per claim 3: 
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Porter et al. and Ginter et al. substantially teach the method of claim 1. Furthermore, 
Porter et al. teach wherein said data products include digital copies of movies (col. 7, lines 27- 
32). 

As per claim 4: 

Porter et al. and Ginter et al. substantially teach the method of claim 1 . Furthermore, 
Porter et al. teach wherein said data products include digital copies of musical songs (col. 7, lines 
27-32). 

As per claim 8: 

Porter et al substantially teaches a system for secure on-line mass distribution of data 
products to end users comprising: an entity having associated therewith copies of first portions of 
a plurality of data products (col. 1, lines 27-33); a plurality of data distribution terminals, each of 
which has associated therewith copies of second portions of said plurality of data products (col. 
1, lines 33-37); a communications system that provides for exchange of data between the entity 
and said plurality of data distribution terminals (fig. 3), and a data distribution program that 
provides copies of said data products to those end users who are entitled to have said copies 
thereof (col. l s lines 38-46), wherein said data distribution program provides a copy of a data 
product by combining a copy of the first portion of said data product obtained from said 
authorization server with a copy of the second portion of said data product obtained from one of 
said plurality of data distribution terminals (col. 1, lines 38-46). 

Not explicitly disclosed by Porter et al. is an "authorization server" as the entity. 
However, Porter et al. teach that the devices can be clients or servers. Therefore, it would have 
been obvious to a person in the art at the time the invention was made to modify the method 
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disclosed in Porter et al. to use an authorization server to hold the first portion of the plurality of 
data products. This modification would have been obvious because a person having ordinary 
skill in the art, at the time the invention was made, would have been motivated to do so since it is 
suggested by Porter et al. in col. 3, line 66 - col. 4, line 5. 

Also not explicitly disclosed by Porter et al. is wherein said step of combining is 
performed at said second location. However, Ginter et al teach that there can be many different 
ways to store information, as well as to combine information, one of the methods including 
combining at the second location. Therefore, it would have been obvious to a person in the art at 
the time the invention was made to modify the method disclosed in Porter et al. to combine the 
portions at the second location. This modification would have been obvious because a person 
having ordinary skill in the art, at the time the invention was made, would have been motivated 
to do so since it is suggested by Ginter et al. in col. 288, lines 
As per claim 9: 

Porter et al. and Ginter et al. substantially teach the system, as applied to claim 8 above. 
Furthermore, Porter et al. teach wherein said authorization server also has associated therewith 
an authorization database containing data indicating entitlement by said end users to copies of 
said data products (fig. 1, element 120 and 130). 
As per claims 10 and 24: 

Porter et al. substantially teach a system/method for securely conveying a data product, 
the data product defining a first portion and a second portion, the system comprising, in 
combination: a first entity maintaining the first portion (col. 3, lines 28-34); a second entity 
maintaining the second portion (col. 3, lines 35-56). 
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Not explicitly disclosed is encrypting the first portion of data and then sending that data 
to the second entity, wherein the first encrypted portion of data is stored with the second portion. 
However, Ginter et al. teach that there can be many different ways to store information, as well 
as to combine information, one of the methods including combining at the second location. 
Therefore, it would have been obvious to a person in the art at the time the invention was made 
to modify the method disclosed in Porter et al. to combine the portions at the second location. 
This modification would have been obvious because a person having ordinary skill in the art, at 
the time the invention was made, would have been motivated to do so since it is suggested by 
Ginter et al. in col. 288, lines 60-63 and col. 290, lines 15-33. 

Also not explicitly disclosed is the third entity gaining access to the first decryption key 
in order to access the data product. However, Ginter et al. teach that in order for a third party, or 
any party for that matter, to gain access to the data product they must first have the appropriate 
decryption key. Therefore, it would have been obvious to a person in the art at the time the 
invention was made to modify the method disclosed in Porter et al, for a third entity to gain 
access to the first decryption key in order to access the data product. This modification would 
have been obvious because a person having ordinary skill in the art, at the time the invention was 
made, would have been motivated to do so since it is suggested by Ginter et al. in col. 131, lines 
18-44. 

As per claims 1 1 and 25: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
10 and 24. Furthermore, Ginter et al. teach the method/system wherein the first entity sends to 
the second entity, together with the encrypted first portion, an encrypted authorization key that 
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can be decrypted using a second decryption key so as to reveal verification information 
indicative of an entity authorized to access the data product, and wherein the second set of logic 
is further executable to record onto the storage medium the encrypted authorization key (col. 14, 
lines 21-43 and col. 22, lines 13-45). 
As per claims 12 and 26: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 

1 1 and 25. Furthermore, Ginter et al. teach the method/system wherein the second decryption 
key is derived as a function of an environmental parameter (col. 22, lines 13-45). 

As per claims 13 and 27: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 

12 and 26. Furthermore, Ginter et al. teach the method/system wherein the environmental 
parameter comprises an identification code associated with the entity authorized to access the 
data product (col. 22, lines 13-45). 

As per claims 14 and 28: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
1 1 and 27. Furthermore, Ginter et al. teach the method/system wherein the third entity 
generating the second decryption key as the function of the identification code; the third entity 
using the second decryption key to decrypt the encrypted authorization key and to thereby gain 
access to the verification information; and the third entity using the verification information to 
validate storage of the data product (col. 131, lines 18-44). 
As per claims 15 and 29: 
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Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
1 1 and 25. Furthermore, Ginter et al. teach the method/system wherein a third set of logic 
executable by a third entity to decrypt the encrypted authorization information, to thereby gain 
access to verification information, and to compare at least a portion of the verification 
information to predetermined information associated with the third entity so as to determine 
whether the third entity is authorized to gain access to the data product (col. 131, lines 18-67). 
As per claims 1 6 and 3 1 : 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
15 and 30. Furthermore, Ginter et al. teach the method/system wherein the predetermined 
information associated with the third entity comprises an identification code (col. 131, lines 40- 
44). 

As per claims 17 and 30: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
10 and 29. Furthermore, Ginter et al. teach the method/system wherein the first entity sends to 
the second entity, together with the encrypted first portion, an encrypted authorization key that 
can be decrypted using a second decryption key so as to reveal verification information 
indicative of an entity authorized to access the data product (col. 14, lines 21-43 and col. 22, 
lines 13-45). 
As per claims 18 and 33: 

Porter et al and Ginter et al. substantially teach the method/system as applied to claims 
17 and 32. Furthermore, Ginter et al. teach the method/system wherein the second decryption 
key is derived as a function of an environmental parameter (col. 22, lines 13-25). 
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As per claims 19 and 34: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
18 and 33. Furthermore, Ginter et al teach the method/system wherein the environmental 
parameter comprises an identification code associated with the entity authorized to store the data 
product (col 22, lines 13-25). 
As per claims 20 and 35: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
1 1 and 34. Furthermore, Ginter et al. teach the method/system wherein the third entity 
generating the second decryption key as the function of the identification code; the third entity 
using the second decryption key to decrypt the encrypted authorization key and to thereby gain 
access to the verification information; and the third entity using the verification information to 
validate storage of the data product (col. 104, line 25 - col. 106, line 15). 
As per claims 21 and 37: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
1 1 and 36. Furthermore, Ginter et al. teach the method/system wherein a third set of logic 
executable by a third entity to decrypt the encrypted authorization information, to thereby gain 
access to verification information, and to compare at least a portion of the verification 
information to predetermined information associated with the storage medium so as to determine 
whether the storage medium is authorized to gain access to store the data product (col. 78, lines 
8-58). 

As per claims 22 and 38: 
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Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
21 and 37. Furthermore, Ginter et al. teach the method/system wherein the predetermined 
information associated with the storage medium comprises and identification code (col. 22, lines 
13-45). 

As per claim 32: 

Porter et al. and Ginter et al. substantially teach the method as applied to claim 24. 
Furthermore, Ginter et al. teach the method further comprising sending to the second entity, 
together with the encrypted first portion, an encrypted authorization key that can be decrypted 
using a second decryption key so as to reveal verification information indicative of an entity 
authorized to store the data product (col. 14, lines 21-43 and col. 22, lines 13-45). 
As per claim 36: 

Porter et al. and Ginter et al. substantially teach the method as applied to claim 32. 
Furthermore, Ginter et al. teach the method further comprising the third entity using the second 
decryption key to decrypt the encrypted authorization key and to thereby gain access to the 
verification information; and the third entity using the verification information tot validate 
storage of the data product (col. 104, line 25 - col. 106, line 15). 

III. Claims 5-6, 23, and 39 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Porter et al., United States Patent No. 5,845,067 and Ginter et al., United States Patent No. 
6,237,786 as applied to claim 1 above, and further in view of Ahrens et al., United States Patent 
No. 5,951,620. 
As per claim 5: 



Application/Control Number: 09/663,891 Page 1 1 

Art Unit: 2133 

Porter et al. and Ginter et al. substantially teach the method, as applied to claim 1 above. 
Not explicitly disclosed is the method further comprising the step of: encrypting said first portion 
of each of said data products. However, Ahrens et al. teach that encryption should be used to 
prevent unauthorized access to the files. Therefore, it would have been obvious to a person in 
the art at the time the invention was made to modify the method disclosed in Porter et al. to 
encrypt the first portion of each of the data products. This modification would have been 
obvious because a person having ordinary skill in the art, at the time the invention was made, 
would have been motivated to do so since it is suggested by Ahrens et al. in col. 7, lines 59-67. 
As per claim 6: 

Porter et al. and Ginter et al. substantially teach the method, as applied to claim 1 above. 
Not explicitly disclosed by Porter et al. is the method, further comprising the step of prior to the 
step of combining, encrypting said first portion of one of said data products. However, Ahrens et 
al. teach that encryption should be used to prevent unauthorized access to the files. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
method disclosed in Porter et al. to encrypt the first portion of each of the data products at some 
time before combining it with the second portion. This modification would have been obvious 
because a person having ordinary skill in the art, at the time the invention was made, would have 
been motivated to do so since it is suggested by Ahrens et al. in col. 7, lines 59-67. 
As per claims 23 and 39: 

Porter et al. and Ginter et al. substantially teach the method/system as applied to claims 
10 and 24. Furthermore, Porter et al. teach data product comprises geographic information (col. 
7, lines 26-32). Not explicitly disclosed is the method/system wherein the third entity comprises 
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a navigation system. However, Ahrens et al. teach the use of a navigation system. Therefore, it 
would have been obvious to a person in the art at the time the invention was made to modify the 
method disclosed in Porter et al. for the third entity to be a navigation system. This modification 
would have been obvious because a person having ordinary skill in the art, at the time the 
invention was made, would have been motivated to do so since it is suggested by Ahrens et al. in 
col. 7 5 lines 29-44. 

Conclusion 

Applicant's submission of an information disclosure statement under 37 CFR 1.97(c) with 
the fee set forth in 37 CFR 1 . 1 7(p) on May 17, 2005 prompted the new ground(s) of rejection 
presented in this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
§ 609(B)(2)(i). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within TWO 
MONTHS of the mailing date of this final action and the advisory action is not mailed until after 
the end of the THREE-MONTH shortened statutory period, then the shortened statutory period 
will expire on the date the advisory action is mailed, and any extension fee pursuant to 37 
CFR 1 .136(a) will be calculated from the mailing date of the advisory action. In no event, 
however, will the statutory period for reply expire later than SIX MONTHS from the mailing 
date of this final action. 
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